Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/h0g9PeUD9s--N_smk4wIyZAF_Is.roa
File: h0g9PeUD9s--N_smk4wIyZAF_Is.roa (raw, json)
Hash identifier: pG1YjkSx4xKJ/YjQ8XDXdcfS/ArwAj34jKIvlk0bQys=
Subject key identifier: 87:48:3D:3D:E5:03:F6:CF:BE:37:FB:26:93:8C:08:C9:90:05:FC:8B
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019DF712C36DFCA06D6C2053599ADA3B24AA
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/h0g9PeUD9s--N_smk4wIyZAF_Is.roa
Signing time: Tue 05 May 2026 07:38:15 +0000
ROA not before: Tue 05 May 2026 07:38:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209604
IP address blocks: 193.106.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:12:c3:6d:fc:a0:6d:6c:20:53:59:9a:da:3b:24:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: May 5 07:38:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87483d3de503f6cfbe37fb26938c08c99005fc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:b8:65:20:3b:f6:9b:33:03:a4:d1:d2:83:
b5:c0:1e:35:e4:19:a4:99:6f:9f:a5:b2:36:70:72:
7b:64:00:95:1c:57:c9:47:1b:4f:6a:2e:f4:b2:8c:
e2:90:88:ca:1c:87:c5:ec:db:08:ca:a6:fb:e0:f8:
01:ad:08:9c:fb:2e:0a:67:83:6a:2c:e9:5c:37:61:
3b:67:b2:8d:9f:8e:db:59:28:91:67:6a:0b:0a:bd:
86:ac:d5:67:c3:c5:c0:d0:ad:1a:3c:58:09:97:45:
88:02:00:b1:c2:39:2c:25:cf:4d:83:9b:7c:e7:d8:
e8:ac:82:ff:43:da:0e:e2:32:e3:41:08:f4:54:e6:
fa:43:f1:f9:d7:3b:83:5c:a2:dd:5d:e0:72:09:d8:
44:2f:f4:d4:f3:dc:61:ae:9c:1b:07:78:17:37:19:
0e:67:2f:11:3f:9d:18:3e:f5:9b:fb:a8:35:ae:71:
3c:2f:f6:bc:8d:32:ff:42:2d:17:dd:c7:dc:29:06:
f9:a1:26:ab:2a:85:ad:dc:1d:e9:6f:e9:e4:65:69:
38:36:11:b2:d1:2c:73:52:e5:14:71:fa:93:ca:97:
73:bc:fa:4b:81:51:d8:39:c5:93:78:de:5b:e5:40:
68:5e:26:35:37:8c:ad:2c:48:6d:0e:16:cd:19:a2:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:48:3D:3D:E5:03:F6:CF:BE:37:FB:26:93:8C:08:C9:90:05:FC:8B
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/h0g9PeUD9s--N_smk4wIyZAF_Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.199.0/24
Signature Algorithm: sha256WithRSAEncryption
78:57:ad:8f:94:ef:2e:22:f3:f2:cc:7d:3f:42:eb:fe:4f:31:
28:66:c4:0b:69:58:e5:bf:13:99:a2:4b:b1:2d:41:7e:58:ad:
c5:bb:d1:d0:ca:75:0b:a1:04:10:b9:90:e6:d8:92:91:e3:13:
e6:f4:c7:8a:f9:c5:57:12:78:b4:b3:c2:ce:09:40:db:50:89:
59:eb:2f:9b:d1:51:f7:59:ac:0c:81:21:2d:a1:0a:41:71:a4:
10:10:8b:f8:a0:22:a9:40:9e:c5:32:63:a0:8b:8c:28:2c:dc:
73:df:fc:14:87:4c:e8:b1:21:57:36:e2:b1:24:ae:49:ba:7c:
f3:14:14:75:ae:42:a9:7c:9d:5c:ec:f7:88:45:1e:3c:06:17:
2a:29:5c:85:b7:98:d2:07:a2:25:23:b9:5d:8a:f9:8f:c9:d9:
94:00:2c:97:4e:81:4d:2e:1a:32:09:9f:43:b5:2e:62:0c:a3:
e5:08:b0:ac:af:29:3f:69:0a:ab:18:20:74:7c:de:f4:ee:9c:
78:ba:19:58:17:59:62:ef:65:d0:01:a6:d9:c7:e3:6d:2e:50:
9c:be:62:f5:be:b5:5e:91:4a:c5:7d:73:4e:bf:33:2d:2b:68:
1a:d1:e4:ea:1b:90:0a:f7:41:9d:e3:de:b2:15:37:e9:5e:66:
df:4f:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:03 2026 by rpki-client